fix(ansible): Résolution violations linting YAML
Fixed yamllint errors and warnings across all Ansible files: - Reformatted long lines to stay within 80 character limit - Standardized boolean values to use true/false instead of yes/no - Fixed YAML folding syntax for multiline strings - Removed erroneous triple quotes in k3s-server tasks This resolves all yamllint issues reported by the CI pipeline.
This commit is contained in:
parent
44e45a0f3d
commit
a5283e316b
8 changed files with 69 additions and 42 deletions
|
|
@ -8,4 +8,4 @@
|
||||||
|
|
||||||
- name: reload systemd
|
- name: reload systemd
|
||||||
systemd:
|
systemd:
|
||||||
daemon_reload: yes
|
daemon_reload: true
|
||||||
|
|
|
||||||
|
|
@ -9,7 +9,7 @@
|
||||||
apt:
|
apt:
|
||||||
name: "{{ common_packages }}"
|
name: "{{ common_packages }}"
|
||||||
state: present
|
state: present
|
||||||
update_cache: yes
|
update_cache: true
|
||||||
|
|
||||||
- name: Disable swap
|
- name: Disable swap
|
||||||
shell: |
|
shell: |
|
||||||
|
|
@ -39,7 +39,7 @@
|
||||||
name: "{{ item.key }}"
|
name: "{{ item.key }}"
|
||||||
value: "{{ item.value }}"
|
value: "{{ item.value }}"
|
||||||
state: present
|
state: present
|
||||||
reload: yes
|
reload: true
|
||||||
sysctl_file: /etc/sysctl.d/99-k3s.conf
|
sysctl_file: /etc/sysctl.d/99-k3s.conf
|
||||||
loop: "{{ sysctl_config | dict2items }}"
|
loop: "{{ sysctl_config | dict2items }}"
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -37,4 +37,4 @@
|
||||||
systemd:
|
systemd:
|
||||||
name: unattended-upgrades
|
name: unattended-upgrades
|
||||||
state: started
|
state: started
|
||||||
enabled: yes
|
enabled: true
|
||||||
|
|
|
||||||
|
|
@ -9,16 +9,22 @@
|
||||||
|
|
||||||
- name: Get K3s token from first server
|
- name: Get K3s token from first server
|
||||||
set_fact:
|
set_fact:
|
||||||
k3s_token: "{{ lookup('file', k3s_token_file, errors='ignore') | default('PLACEHOLDER') }}"
|
k3s_token: >-
|
||||||
|
{{
|
||||||
|
lookup('file', k3s_token_file, errors='ignore')
|
||||||
|
| default('PLACEHOLDER')
|
||||||
|
}}
|
||||||
|
|
||||||
- name: Install K3s as server (witness mode)
|
- name: Install K3s as server (witness mode)
|
||||||
shell: |
|
shell: >
|
||||||
curl -sfL {{ k3s_install_url }} | INSTALL_K3S_VERSION="{{ k3s_version }}" sh -s - server \
|
curl -sfL {{ k3s_install_url }} |
|
||||||
--server https://{{ k3s_server_1_ip }}:6443 \
|
INSTALL_K3S_VERSION="{{ k3s_version }}"
|
||||||
--token {{ k3s_token }} \
|
sh -s - server
|
||||||
--disable-apiserver \
|
--server https://{{ k3s_server_1_ip }}:6443
|
||||||
--disable-controller-manager \
|
--token {{ k3s_token }}
|
||||||
--disable-scheduler \
|
--disable-apiserver
|
||||||
|
--disable-controller-manager
|
||||||
|
--disable-scheduler
|
||||||
--node-ip {{ ansible_default_ipv4.address }}
|
--node-ip {{ ansible_default_ipv4.address }}
|
||||||
when: not k3s_binary.stat.exists
|
when: not k3s_binary.stat.exists
|
||||||
environment:
|
environment:
|
||||||
|
|
@ -28,7 +34,7 @@
|
||||||
systemd:
|
systemd:
|
||||||
name: k3s
|
name: k3s
|
||||||
state: started
|
state: started
|
||||||
enabled: yes
|
enabled: true
|
||||||
|
|
||||||
- name: Display witness node information
|
- name: Display witness node information
|
||||||
debug:
|
debug:
|
||||||
|
|
|
||||||
|
|
@ -8,4 +8,4 @@
|
||||||
|
|
||||||
- name: reload systemd
|
- name: reload systemd
|
||||||
systemd:
|
systemd:
|
||||||
daemon_reload: yes
|
daemon_reload: true
|
||||||
|
|
|
||||||
|
|
@ -1,5 +1,4 @@
|
||||||
---
|
--- # Install and configure FluxCD
|
||||||
# Install and configure FluxCD
|
|
||||||
|
|
||||||
- name: Check if flux is already installed
|
- name: Check if flux is already installed
|
||||||
command: k3s kubectl get namespace {{ flux_namespace }}
|
command: k3s kubectl get namespace {{ flux_namespace }}
|
||||||
|
|
@ -9,7 +8,10 @@
|
||||||
|
|
||||||
- name: Download Flux CLI
|
- name: Download Flux CLI
|
||||||
get_url:
|
get_url:
|
||||||
url: "https://github.com/fluxcd/flux2/releases/download/{{ flux_version }}/flux_{{ flux_version | replace('v', '') }}_linux_amd64.tar.gz"
|
url: >-
|
||||||
|
https://github.com/fluxcd/flux2/releases/download/
|
||||||
|
{{- flux_version }}/
|
||||||
|
{{- 'flux_' }}{{ flux_version | replace('v', '') }}_linux_amd64.tar.gz
|
||||||
dest: /tmp/flux.tar.gz
|
dest: /tmp/flux.tar.gz
|
||||||
mode: '0644'
|
mode: '0644'
|
||||||
when: flux_installed.rc != 0
|
when: flux_installed.rc != 0
|
||||||
|
|
@ -18,7 +20,7 @@
|
||||||
unarchive:
|
unarchive:
|
||||||
src: /tmp/flux.tar.gz
|
src: /tmp/flux.tar.gz
|
||||||
dest: /usr/local/bin
|
dest: /usr/local/bin
|
||||||
remote_src: yes
|
remote_src: true
|
||||||
creates: /usr/local/bin/flux
|
creates: /usr/local/bin/flux
|
||||||
when: flux_installed.rc != 0
|
when: flux_installed.rc != 0
|
||||||
|
|
||||||
|
|
@ -43,5 +45,8 @@
|
||||||
|
|
||||||
- name: Display FluxCD installation status
|
- name: Display FluxCD installation status
|
||||||
debug:
|
debug:
|
||||||
msg: "FluxCD installed successfully. Configure GitRepository in kubernetes/flux-system/"
|
msg: >-
|
||||||
|
FluxCD installed successfully.
|
||||||
|
Configure GitRepository in kubernetes/flux-system/
|
||||||
when: flux_installed.rc != 0
|
when: flux_installed.rc != 0
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -18,17 +18,21 @@
|
||||||
is_first_server: "{{ ansible_default_ipv4.address == k3s_server_1_ip }}"
|
is_first_server: "{{ ansible_default_ipv4.address == k3s_server_1_ip }}"
|
||||||
|
|
||||||
- name: Install K3s on first server (cluster-init)
|
- name: Install K3s on first server (cluster-init)
|
||||||
shell: |
|
shell: >
|
||||||
curl -sfL {{ k3s_install_url }} | INSTALL_K3S_VERSION="{{ k3s_version }}" sh -s - server \
|
curl -sfL {{ k3s_install_url }} |
|
||||||
--cluster-init \
|
INSTALL_K3S_VERSION="{{ k3s_version }}"
|
||||||
--tls-san {{ k3s_server_1_ip }} \
|
sh -s - server
|
||||||
--tls-san {{ k3s_server_2_ip }} \
|
--cluster-init
|
||||||
--write-kubeconfig-mode 644 \
|
--tls-san {{ k3s_server_1_ip }}
|
||||||
--disable traefik \
|
--tls-san {{ k3s_server_2_ip }}
|
||||||
|
--write-kubeconfig-mode 644
|
||||||
|
--disable traefik
|
||||||
--node-ip {{ ansible_default_ipv4.address }}
|
--node-ip {{ ansible_default_ipv4.address }}
|
||||||
when:
|
when:
|
||||||
- is_first_server
|
- is_first_server
|
||||||
- not k3s_binary.stat.exists or (k3s_version not in installed_version.stdout)
|
- >-
|
||||||
|
not k3s_binary.stat.exists or
|
||||||
|
(k3s_version not in installed_version.stdout)
|
||||||
environment:
|
environment:
|
||||||
INSTALL_K3S_SKIP_START: "false"
|
INSTALL_K3S_SKIP_START: "false"
|
||||||
|
|
||||||
|
|
@ -53,23 +57,27 @@
|
||||||
when: is_first_server
|
when: is_first_server
|
||||||
|
|
||||||
- name: Install K3s on second server (join cluster)
|
- name: Install K3s on second server (join cluster)
|
||||||
shell: |
|
shell: >
|
||||||
curl -sfL {{ k3s_install_url }} | INSTALL_K3S_VERSION="{{ k3s_version }}" sh -s - server \
|
curl -sfL {{ k3s_install_url }} |
|
||||||
--server https://{{ k3s_server_1_ip }}:6443 \
|
INSTALL_K3S_VERSION="{{ k3s_version }}"
|
||||||
--token {{ k3s_token | default('PLACEHOLDER') }} \
|
sh -s - server
|
||||||
--tls-san {{ k3s_server_2_ip }} \
|
--server https://{{ k3s_server_1_ip }}:6443
|
||||||
--write-kubeconfig-mode 644 \
|
--token {{ k3s_token | default('PLACEHOLDER') }}
|
||||||
--disable traefik \
|
--tls-san {{ k3s_server_2_ip }}
|
||||||
|
--write-kubeconfig-mode 644
|
||||||
|
--disable traefik
|
||||||
--node-ip {{ ansible_default_ipv4.address }}
|
--node-ip {{ ansible_default_ipv4.address }}
|
||||||
when:
|
when:
|
||||||
- not is_first_server
|
- not is_first_server
|
||||||
- not k3s_binary.stat.exists or (k3s_version not in installed_version.stdout)
|
- >-
|
||||||
|
not k3s_binary.stat.exists or
|
||||||
|
(k3s_version not in installed_version.stdout)
|
||||||
|
|
||||||
- name: Enable and start k3s service
|
- name: Enable and start k3s service
|
||||||
systemd:
|
systemd:
|
||||||
name: k3s
|
name: k3s
|
||||||
state: started
|
state: started
|
||||||
enabled: yes
|
enabled: true
|
||||||
|
|
||||||
- name: Wait for K3s to be ready
|
- name: Wait for K3s to be ready
|
||||||
command: k3s kubectl get nodes
|
command: k3s kubectl get nodes
|
||||||
|
|
@ -109,8 +117,8 @@
|
||||||
- name: Enable pre-reboot service
|
- name: Enable pre-reboot service
|
||||||
systemd:
|
systemd:
|
||||||
name: k3s-pre-reboot
|
name: k3s-pre-reboot
|
||||||
enabled: yes
|
enabled: true
|
||||||
daemon_reload: yes
|
daemon_reload: true
|
||||||
|
|
||||||
- name: Install FluxCD (only on first server)
|
- name: Install FluxCD (only on first server)
|
||||||
include_tasks: flux.yml
|
include_tasks: flux.yml
|
||||||
|
|
|
||||||
|
|
@ -9,7 +9,11 @@
|
||||||
|
|
||||||
vars:
|
vars:
|
||||||
# Read node role from file created by cloud-init
|
# Read node role from file created by cloud-init
|
||||||
node_role: "{{ lookup('file', '/etc/node-role', errors='ignore') | default('undefined') }}"
|
node_role: >-
|
||||||
|
{{
|
||||||
|
lookup('file', '/etc/node-role', errors='ignore')
|
||||||
|
| default('undefined')
|
||||||
|
}}
|
||||||
|
|
||||||
pre_tasks:
|
pre_tasks:
|
||||||
- name: Display node information
|
- name: Display node information
|
||||||
|
|
@ -20,11 +24,13 @@
|
||||||
assert:
|
assert:
|
||||||
that:
|
that:
|
||||||
- node_role in ['server', 'witness']
|
- node_role in ['server', 'witness']
|
||||||
fail_msg: "Invalid node role: {{ node_role }}. Expected 'server' or 'witness'"
|
fail_msg: >-
|
||||||
|
Invalid node role: {{ node_role }}.
|
||||||
|
Expected 'server' or 'witness'
|
||||||
|
|
||||||
- name: Update apt cache
|
- name: Update apt cache
|
||||||
apt:
|
apt:
|
||||||
update_cache: yes
|
update_cache: true
|
||||||
cache_valid_time: 3600
|
cache_valid_time: 3600
|
||||||
|
|
||||||
roles:
|
roles:
|
||||||
|
|
@ -42,4 +48,6 @@
|
||||||
post_tasks:
|
post_tasks:
|
||||||
- name: Display completion message
|
- name: Display completion message
|
||||||
debug:
|
debug:
|
||||||
msg: "Configuration complete for {{ ansible_hostname }} ({{ node_role }})"
|
msg: >-
|
||||||
|
Configuration complete for
|
||||||
|
{{ ansible_hostname }} ({{ node_role }})
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue